Danny Tsai
says to
YSITD
如果你只用HTML我相信很難有XSS (